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(54) Content usage management system and content 



management method 



(57) A content usage management system 1 com- 
prises a user terminal 200a using a content as a digital 
production and a server 1 00 managing usage of the con- 
tent in the userterminal200a over a communication net- 
work 300; wherein the sever 100 includes a user right 
information DB 120 that memorizes right information re- 
garding a usage right of the content entitled to a user 
who uses the terminal 200a and a content information 



generation unit 170 that generates LT which is right In- 
formation Indicating a part of usage right entitled to the 
user based upon a request from the user and that sends 
the LT to the sever terminal 200a; and the userterminaf 
200a includes a communication unit that receives the 
LT sent from the server 100 and a license information 
processing unit 260 that controls usage of the content 
according to the usage right Indicated on the received 
LT. 
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Description 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

[0001 ] The present invention relates to a system and 
method which manage a digital content such as music 
and videos distributed via communications or broad- 
casting, and especially relates to atechnique that Is per- 
formed in a simple and assured manner to manage 
rights of the content and to control over the usage ot the 
content such as to restrict the number of times to repro- 
duce the content, etc. 

(2) Description of the Prior Art 

[0002] In recent years, systems that distribute some 
digital productions such as music, videos and games via 
the Internet or digital broadcasting have been devel- 
oped and a part of them is now In a phase for practical 
use. For distributing these contents, the methodology of 
right management and usage control (DRM: Digital 
Rights Management), which restricts the numbers of re- 
production (play/playback), moving and copying for the 
distributed content, have also been examined from a 
viewpoint of copyrights protection, etc. 
[0003] The conventional digital content distribution 
systems, as seen Inthe Japanese Laid-Open Patent Ap- 
plication Nos. 2000-48076 and 2000-293439, have been 
modeled to distribute a usage rule of the content for 
each user together with the content Itself to a recipient 
side to make everything be managed by a user terminal 
side. 

[0004] For example, in case a user wants to purchase 
a right to see the movie "Matrix" three times, the user 
terminal receives the content of the movie together with 
Its usage rule Indicating, "Matrix can be viewed three 
times" via communication from a distribution server, and 
the reproduction of the content Is under the manage- 
ment according to the rule. 

[0005] Once the abovementloned rules are sentto the 
user terminal, the distribution server is no longer in- 
volved with the usage rule of the user. 
[0006] When ■Matrix" is viewed by reproducing the 
content stored at the user terminal, a process to reduce 
by one Is executed for each view from the number of 
views allowed In the usage rules managed by the termi- 
nal. Then, a process is executed to prohibit any views 
when the number of views permitted becomes zero. 
[0007] Fig. 1 shows a structure of the conventional 
digital content distribution system. 
[0008] A distribution server 1000 is equipped with a 
user management database 1001 that stores ID infor- 
mation, etc. of the users registered as a member, a con- 
tent information database 1 003 that stores a content key 
to encrypt the content and usage rules of content, a con- 
tent database 1 006 that stores a content, a user authen- 



tication unit 1002 that executes user authentication, a 
content information generation unit 1 004 that generates 
content Information Including usage rules of content and 
information of a content key, a content encryption unit 

5 1 005 that encrypts the content information by th e user's 
unique Information such as a user ID, etc., a content ac- 
quisition unit 1007 that acquires the content specified 
from the content database 1 006, a content Information 
encryption unit 1 006 that encrypts the content with the 

10 content key and a communication unit 1 009 that com- 
municates with a user terminal 2000. 
[0009] On the other hand, the user terminal 2000 is 
equipped with a communication unit 2001 that commu- 
nicates with the distribution server 1 000, an ID informa- 

13 tlon storage unit 2002 that stores ID information, a stor- 
age unit 2003 (HDD) that stores the content encrypted, 
a content Information decryption unit 2006 that decrypts 
the content key and usage rules from the content Infor- 
mation received, a usage rule management unit 2007 

20 that manages the usage rules and the content key of the 
content, a usage rule processing unit 2008 that process- 
es the usage rules when the content Is reproduced, a 
content decryption unit 2005 that decrypts the content 
by the content key acquired from the usage rule 

25 processing unit 2008 when the rules are met, and an 
external media access unit 2004 that outputs the con- 
tent to an external media 5000. 
[0010] Fig. 2 shows a process flow for the case the 
user terminal 2000 purchases the content from the dls- 

30 trlbution server 1 000 In this digital content distribution 
system. 

[0011] When a user requests to purchase the content, 
the communication unit 2001 In the user terminal 2000 
acquires ID Information of the user terminal 2000 which 

35 is stored in the ID Information storage unit 2002, and 
sends this ID Information with the content purchase re- 
quest to the distribution server 1 000 (S1 001). 
[0012] The user authentication unit 1002 receiving 
this information through the communication unit 1 009 

40 on the distribution server 1 000 collates It with the ID In- 
formation stored in the user management database 
1001 to execute user authentication, and then passes 
the content purchase request to the content information 
generation unit 1004 (S1002). 

« [0013] The content Information generation unit 1 004 
executes a billing process for the content purchase, ac- 
quires the usage rule and the content key Information of 
the purchased content from the content Information da- 
tabase 1 003, and then passes the content key with the 

so information of the purchased content to the content ac- 
quisition unit 1007. Also, the content information includ- 
ing information of the usage rule and content key Is gen- 
erated and passed to the content Information encryption 
unit 1 005, and then the content Information encryption 

55 unit 1 005 encrypts the content information (S1003). 
[0014] The content acquisition unit 1 007 acquires the 
relevant content from the content database 1006, and 
the content encryption unit 1008 encrypts this content 
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by the content key (S1004). 

[0015] The communication unit 1 009 on the distribu- 
tion server 1000 sends the encrypted content and the 
encrypted content Information to the usertermlnaJ 2000. 
[0016] The communication unit 2001 In the user ter- 
minal 2000 receives the encrypted content and the en- 
crypted content Information including the content key 
and usage rule Information (S1 005), and sends the con- 
tent to the storage unit 2003 to be stored (S1 006). 
[001 7] The content Information Is also sent to the con- 
tent Information decryption unit 2006. The content Infor- 
mation decryption unit 2006 decrypts the encrypted con- 
tent information, takes out the content key and usage 
rule, and stores them in the usage rule management unit 
2007 (S1 007). 

[0018] Fig. 3 shows a process flow for the case the 
user terminal 2000 reproduces the content In this digital 
content distribution system. 

[001 9] When the user requests to reproduce the con- 
tent, the usage rule processing unit 2006 acquires the 
usage rules and content key for the relevant content be- 
ing managed In the usage rule management unit 2007 

(52001) and checks the number of reproduction (how 
many times It allows to reproduce) in the usage rule 

(52002) . 

[0020] if the number of reproduction Is bigger than ze- 
ro (S2003), the number of reproduction In the usage rule 
is decremented (S2004) and the usage rule and the con- 
tent key are stored In the usage rule management unit 
2007(S2005). 

[0021 ] The content decryption unit 2005 acquires the 
relevant contentfrom the storage unit 2003 (S2006), de- 
crypts the content by the content key provided from the 
usage rule processing unit 2006, and reproduces the 
content (S2007). 

[0022] When the number of reproduction Is not bigger 
than 0 in Step S2003, it terminates the reproduction 
process. 

[0023] The image/sound reproduced In the content 
are output from the content decryption unit 2005. Also, 
if the content is moved out or copied to the external me- 
dia 5000, the Image/sound of the content are output to 
the external media 5000 via the external media access 
unit 2004. 

[0024] In order to avoid any leaks of confidential In- 
formation, the ID Information storage unit 2002, the con- 
tent Information decryption unit 2006 and the usage rule 
management unit 2007 that handle the confidential in- 
formation are generally realized in a security module 
such as an IC card, and this security module is loaded 
to the user terminal 2000. 

[0025] In this case, when the Information of the usage 
rule and content key Is transferred to the usage rule 
processing unit 2008 from the usage rule management 
unit 2007, these information is encrypted and output 
from the security module. Then, the usage rule process- 
ing unit 2008 decrypts these information to use. In ad- 
dition, when the usage rule updated by the usage rule 



processing unit 2008 Is stored in the usage rule man- 
agement unit 2007, It Is encrypted once again for send- 
ing out to the security module. 
[0026] In the conventional digital content distribution 
5 system, the usage rule of the content for each user Is 
managed In such a way by the user terminal side. 
[0027] However, when the usage rules for each user 
are managed at the user terminal, there are problems 
as follow. 

10 

(1) A complex management scheme of the usage 
rule Is necessary for the user terminal so that it may 
require having high loaded functions on the user ter- 
minal. 

« (2) Since the distribution server is not Involved with 
any usage and right management processes for the 
distributed content at all, it Is unable to track the con- 
tent and detect when the content has been copied 
to what media even If the content is copied or the 
like happens on the user terminal. 

(3) When the storage mechanism (HDD) in the user 
terminal Is crashed, It Is difficult to restore the usage 
rule, etc. (Because there is no means other than the 
user terminal to maintain the Information.) 

(4) For those cases to perform service such as to 
make the number of reproduction +1 automatically 
In the usage rule for a previously purchased content 
If any new content Is purchased, or to add a new 
usage rule, etc., it becomes necessary to change 
both hardware and software on the distribution 
server and user terminal. Therefore, it is actually dif- 
ficult to perform the processes for such service to 
expand some usage rule or to add a new rule. 

Additionally, It may also be possible to consider 
a model, which makes all of each user's usage rule 
be managed at the distribution server side, and 
makes the user terminal, without having any control 
over the usage rule, acquire the content Itself (or 
possibly the content key only if the content Is en- 
crypted) from the distribution server via communi- 
cation each time It is viewed. However, In such a 
case, there is a problem as follows. 

(5) Since there is no control over the use of the con- 
tent after the content has been handed over to the 
user terminal, the user terminal can use the content 
without any limitation (especially, reproduction). 

SUMMARY OF THE INVENTION 

[0026] The present invention is available to solve 
these conventional problems, aiming at providing a con- 
tent usage management system and content manage- 
ment methods, etc. that make the server control usage 
of a content In a user terminal In a simple and assured 
manner without giving any extra loads of process onto 
the user terminal. 

[0029] In order to achieve abovementloned object, 
the content usage management system related to the 
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present invention Includes a terminal device that uses 
a content as a digital production, and a server device 
that manages usage of the content on the terminal de- 
vice via a transmission line, wherein the server device 
Includes a right Information memory unit operable to 
memorize right Information related to a usage right of 
the content entitled to a user who uses the terminal de- 
vice, and a license ticket issuance unit operable to gen- 
erate a license ticket based on a request from a user as 
right Information that Indicates a part of the usage right 
entitled to the user and to send the license ticket to the 
terminal device; and the terminal device Includes a re- 
ceiving unit operable to receive the license ticket sent 
from the server device, and a content usage control unit 
operable to control usage of the content according to 
the usage right Indicated on the received license ticket. 
[0030] In this specification , "usage (use)" of a content 
Includes all operations for using the content such as "re- 
production (play)", "moving", "copying" of the content, 
"printing" of the content for an electronic book, and even 
further Includes pre-actions tor these operations such 
as downloading of "license Information" (I.e. to down- 
load a license ticket In advance). 
[0031] In the content usage management system 
composed in such a way, the license ticket issuance unit 
generates the license ticket as right Information indicat- 
ing a part of the usage right entitled to the user and 
sends the license ticket to the terminal device. Also, the 
content usage control unit In the terminal device controls 
the usage of the content according to the usage right 
indicated on the received license ticket. 
[0032] Therefore, It Is not necessary for the terminal 
device to manage the entire usage right entitled to the 
user, and usage of the content can be controlled Just by 
managing a part of the usage right entitled to the user 
that Is shown on the license ticket, and thereby remark- 
ably reduces a load of process required forthe manage- 
ment by the terminal device. Additionally, the server de- 
vice can grasp a status of content usage on each termi- 
nal In accordance with the license ticket Issuance. When 
the content Is copied atthe terminal device, It Is possible, 
by making a query to the server device for a copying 
permission, to detect when the copy was taken to what 
medium and to keep track of the content. Also, because 
the server device holds the usage right entitled to the 
user, It Is easy to restore usage rules, etc. of the user 
when a storage unit (HDD) on the terminal device Is 
crashed. It also makes It easy to execute a process for 
adding some extra usage rule or for providing some 
service to expand a usage rule, for example, adding 1 
to the number of reproduction In the usage rule of the 
content. Furthermore, since the content usage control 
unit on the terminal device controls usage of the content 
according to a usage right Indicated on the received li- 
cense ticket, it assures to preventthe content from being 
used unlimitedly by the terminal device. 
[0033] Herein the license ticket issuance unit acquires 
a request from the user that specifies a part of the usage 



right entitled to the user, generates a license ticket cor- 
responding to the request, and sends the license ticket 
to the terminal device. It can also be featured to gener- 
ate a license ticket that Indicates a minimum unit of a 

5 usage right Included In the usage right entitled to the 
user, and to send the license ticket to the terminal de- 
vice. In such a structure, It is possible to grasp a status 
of usage for the content on each terminal device In a 
detailed level, and to minimize the load of process re- 

io quired for managing the usage right on the eachtermlnal 
device. 

[0034] In addition, the license ticket may be In a struc- 
ture that includes detective information to detect wheth- 
er any detail of the license ticket has been altered. Be- 
ts cause of this, It ensures to prevent any alterations on 
the license ticket. 

[0035] The present Invention is not only realized as 
above content usage system, but also realized as a 
server device and as a terminal device, which composes 

20 the system. The Invention may also be realized as a con- 
tent usage management method using characteristic 
means that realize the server device and the terminal 
device as program steps. Additionally, It may be realized 
even as a program that makes a personal computer, etc. 

25 to execute these steps. It may be unnecessary to men- 
tion, but the program can be distributed extensively via 
transmission media such as the Internet, recordable 
media (e.g. DVD) and so on. 

30 BRIEF DESCRIPTION OF THE DRAWINGS 

[0036] These and other objects, advantages and fea- 
tures of the Invention will become apparent from the fol- 
lowing description thereof taken in conjunction with the 
ss accompanying drawings that Illustrate a specific embod- 
iment of the Invention. In the Drawings: 

Flg.1 is a block diagram that shows a structure of 
the conventional digital content distribution system. 
40 Fig. 2 is a flow chart that shows the process when 
content Is purchased in the conventional digital con- 
tent distribution system. 

Fig. 3 is a flow chart that shows the process when 

content is reproduced in the conventional digital 
43 content distribution system. 

Fig. 4 Is a diagram that shows an overall structure 

of the content usage management system 1 related 

to the present embodiment. 

Fig. 5 is afunctional block diagram that shows struc- 
50 tures of the server 100 and the user terminals 

200a— 200c described in Fig. 4. 

Fig. 6 Is a diagram that shows a structure sample 

of the user management table 111 described In Fig. 

5. 

55 Fig. 7 is a diagram that shows a structure sample 
of the user right information management table 121 
described In Fig. 5. 

Fig. 6 is a diagram that shows a structure sample 
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of the license Information described in Fig. 5. 
Fig. 9 Is a diagram that shows a LT data form struc- 
ture generated by the content Information genera- 
tion unit 170. 

Fig. 1 0 is a flow chart that shows a process respec- 
tively executed on the user terminal 200a and serv- 
er 100 when the user purchases the content 
through this system. 

Fig. 11 Is a diagram that shows a content purchase 
screen (1). 

Fig. 1 2 is a diagram that shows a content purchase 
screen (2). 

Fig. 13 is a flow chart that shows a process respec- 
tively executed on the user terminal 200a and serv- 
er 1 00 when the user utilizes the content In this sys- 
tem. 

Fig. 1 4 Is a diagram that shows a using content se- 
lection screen. 

Fig. 15 is a diagram that shows a content usage re- 
quest screen. 

Fig. 16 Is a diagram that shows a relationship be- 
tween the usage rules extracted and distributed to 
the user terminal and fluctuations in the usage rules 
managed by the server. 

Fig. 17 is a diagram that shows a relationship be- 
tween the usage rule permitting to use once and Its 
usage duration. 

Fig. 1 8 is a flow chart that shows a process execut- 
ed by the user terminal 200a for a case the content 
or LT is moved out to some external media In this 
system. 

Fig. 1 9 Is a diagram that shows a moving content 
selection screen. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

[0037] The following Is a detailed explanation of em- 
bodiments for the present Invention with reference to fig- 
ures. 

[0036] Fig. 4 Is a diagram that shows an overall struc- 
ture of the content usage management system 1 related 
to this embodiment. 

[0039] In this content usage management system 1 , 
usage rights (license) for each content, which are as- 
signed to a user who purchases the digitized content 
such as music, videos and books, are managed mainly 
at a center side in a dynamic way, and a license ticket 
(hereinafter also referred to as "LT") is distributed based 
upon a request from the user which makes the content 
available to use within a scope of usage rules included 
In the LT, so as to protect copyrights of the content by 
the system. The system Includes a server 100 located 
at a center, user terminals 200a to 200c of the users who 
use the content and a communication network 300 that 
connects these elements. 

[0040] The server 1 00 Is a computer such as a work- 
station and functions as a user management server, 



content distribution server, billing server, and license 
management server. To be more specific , the server 1 00 
manages the user who Joins to this system 1 and the 
terminal owned by him, accepts any purchase of the 
5 content from the user terminals 200a to 200c, holds a 
web page that accepts any requests to issue a license 
ticket (hereinafter also referred to as "LT issuance re- 
quest") from the user terminals 200a to 200c, etc., bills 
based upon the content purchase request coming from 
io the user terminals 200a to 200c, distributes the encrypt- 
ed content to the user terminals 200a to 200c and also 
distributes LT to use the encrypted content at the user 
terminals 200a to 200c according to the LT issuance re- 
quest. This LT Includes a content key to decrypt the en- 
t * crypted content and the extracted usage rules taken out 
partially from the usage rights (license) for the content 
granted to the user. 

[0041] The user terminals 200a to 200c are the com- 
puter device such as a personal computer, mobile infor- 
mation terminal, digital television receiver and functions 
as a client for the server 1 00. Specifically, the user ter- 
minals 200a to 200c access the web page on the server 
100 according to the user's operation by using tools 
such as the Internet browser software, send the content 
purchase request and receive the content distributed, 
send the LT Issuance request for using the content and 
receive the LT, and reproduce the content within a scope 
of the extracted usage rules on LT. 
[0042] It Is possible to attach an external media 500b 
forthe user terminal 200b (for example, an SD card) and 
an external media 500c for the user terminal 200c (for 
example, an IG card) to the user terminal 200a, and is 
structured to becapable of copying and moving the con- 
tent and LT held by the user terminal 200a to the external 
media 500b and 500c, and reproducing the content on 
the user terminals 200b and 200c. 
[0043] The communication network 300 is the com- 
munication media provide by some wire communica- 
tions such as the Internet and CATV and wireless com- 
munications such as digital broadcasting. 
[0044] Fig. 5 Is a functional block diagram that indi- 
cates structures of the server 100 and user terminals 
200a to 200c shown in Fig. 4. Since the functional struc- 
ture in the user terminals 200a to 200c is identical, the 
userterminal 200a represents all in the figure. The com- 
munication network 300 Is also shown In the figure. 
[0045] The server 1 00 Is roughly comprised of a data 
unit (a user management DB 1 1 0, user right Information 
DB 120, content information DB 130, and content DB 
140) which is realized by the data file, etc. stored in the 
hard disk, etc., a processing unit (a user authentication 
unit 150, user right processing unit 160, license Infor- 
mation generation unit 165, content information gener- 
ation unit 170, content Information encryption unit 175, 
content acquisition unit 180, content encryption unit 
185, and communication unit 190) which is realized by 
the hardware such as CPU, RAM, ROM, etc., and the 
program, etc. executed from CPU. 
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[0046] The user management DB 1 1 0 stores the user 
Information, etc. of the user registered as a member to 
this content usage management system 1 . To be more 
specific, In order to put the user rights under its man- 
agement, the user management DB110 uses an unique 
client ID (terminal ID) assigned by the user terminal to 
associate the rights to the user information including the 
user ID. It is a memory unit to memorize multiple user 
management tables 1 11 to register and manage the cli- 
ent ID of the user terminal owned by the user who has 
registered as a member, the unique ID Information as- 
signed to the user and the user Information of the user. 
[0047] The user right information DB 120 stores the 
user right (license) Information tor the content. To be 
specific, the user right Information DB 120 Is a memory 
unit to memorize multiple user right Information man- 
agement tables 121 to manage the content purchased 
by the user and the remaining usage rights (license) en- 
titled to the user for the content per each usage aspect. 
(For example, reproduction, moving, copying, printing, 
usage duration, etc.) 

[0048] The content Information DB 1 30 stores related 
Information of the content (such as a content key). To 
put It concretely, the content Information DB 130 holds 
multiple content keys 131 that encrypts the content, a 
content key table 1 32 that records a correlation between 
the content key 131 and the content ID, and so on. 
[0049] The content DB 1 40 stores the content. To be 
more specific, the content DB 1 40 stores and holds mul- 
tiple contents 141 and a content table 142 that records 
a correlation between the content and the content ID. 
[0050] The user authentication unit 1 50 authenticates 
the user. Specifically, the user authentication unit 150 
uses the user management table 111 to specify the 
rights managed on the server and a user ID from the ID 
Information (client ID) contained In the content purchase 
request and the LT issuance request received from the 
user terminals 200a to 200c. The user authentication 
unit 150 may update the user Information In the user 
management table 111 If a user's address, etc. are 
changed, and may add the client ID to the user manage- 
ment table 111 If some user's terminal device Is pur- 
chased. 

[0051 ] The user right processing unit 1 60 registers the 
user right Information for the content according to the 
purchase requests and updates the right Information ac- 
cording to the usage requests. To be specific, after a 
billing process Is executed according to the content pur- 
chase request, the user right processing unit 1 60 regis- 
ters the rights of the user to the user right information 
management table 121 In the user right Information DB 
120. 

[0052] Since the billing process itself is not a nature 
of the present Invention, the part of the billing process 
is not described in the figure. Also, when the user right 
is registered, an initial value set by the content provider 
as UR-Us (Usage Rule for User on server) which Is the 
user right Information managed on the server Is as- 



signed. Additionally, when there is a LT Issuance re- 
quest, the user right processing unit 160 confirms 
whether It is possible to extract the usage right UR-Uc 
(Usage Rule for Useron client) from the right Information 
5 UR-Us at that point to the user or not. And, once It Is 
confirmed, It passes the requested usage right UR-Us 
to the license information generation unit 1 65, and atthe 
same time, updates a right Information UR-Us managed 
on the server with the details decremented for the ex- 
it? tracted UR-Uc. Furthermore, If there is a notification to 
change the right Information from the content provider, 
for example, If there is a notification to add some extra 
numbers of usages or to extend the usage duration as 
a complimentary service to the content buyers, the user 
f5 right processing unit 160 updates the license informa- 
tion evenly for each buyer. 

[0053] The license Information generation unit 165 
generates the usage rights of the content and license 
information requested. 
20 [0054] The content Information generation unit 170 
acquires the content key from the content Information 
DB 130 and generates the content Information (LT) that 
Includes the license Information provided from the li- 
cense Information generation unit 165 and the content 
25 key information acquired. To be more specific, the con- 
tent Information generation unit 170 acquires the con- 
tent key 130 corresponding to the content ID by access 
the content Information DB 1 30 with the content key ta- 
ble 132, and generates LT which Includes this content 
so key, the extracted usage rule (UR-Uc) and the license 
Information provided from the license information gen- 
eration unit 165. 

[0055] The content Information encryption unit 175 
encrypts the content Information. 

35 [0056] Specifically, when the content key and footer 
on LT are added, the content Information encryption unit 
175 encrypts this footer if needed. This encryption, for 
example, encrypts the object by the terminal ID (client 
ID) of the user terminals 200a to 200c, which has made 

40 a request to Issue LT. In such a way of the encryption 
handled by the client ID, LT can be bound to the user 
terminal holding the client ID. 

[0057] Using public key cryptography, it may be en- 
crypted by the public key of the user. It may also be en- 
45 crypted with a secret key shared between the server and 
the terminal. 

[0058] Also, SAC (Secure Authenticated Channel) In 
a correlated authentication such as SSL (Secure Sock- 
ets Layer) is formed between the server 100 and the 

so user terminals 200a to 200c, and if a secure communi- 
cation channel Is assured between the server and the 
terminals, the encryption of the license Information Is op- 
tional (not mandatory). However, In this embodiment, 
the explanation Is given based on the premise that the 

55 content information encryption unit 1 75 executes the LT 
encryption process and that SAC is generated with the 
server terminals. 

[0059] The content acquisition unit 180 acquires the 
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specified content from the content DB 140. To be more 
specific, the content acquisition unit 180 refers to the 
content table 142 in the content DB 140 and acquires 
the content 141 , which corresponds to the content ID, 
and passes It to the content encryption unit 185. 
[0060] The content encryption unit 1 85 encrypts the 
content. To put It concretely, the content encryption unit 
1 85 encrypts the content provided from the content en- 
cryption unit 185. The content key handles this encryp- 
tion. 

[0061 ] A communication unit 1 90 communicates with 
the user terminal 200. To be more specific, the commu- 
nication unit 1 90 is a communication interface, which is 
realized by scripts, programs, etc. stated on the web 
page that communicates with the user terminals 200a 
to 200c via the communication network 300. It analyzes 
commands and messages sent from the user terminals 
200a to 200c, and based upon the result, may request 
a process to the user authentication 1 50, distributes the 
content provided from the content encryption unit 1 85 
to the user terminals 200a to 200c, distributes LT pro- 
vided from the content Information encryption unit 1 75 
to the user terminals 200a to 200c, and then generates 
SAC with the server. 

[0062] On the other hand, the user terminal 200 is 
equipped with a communication unit 210, operation unit 
220, ID Information storage unit 230, content storage 
unit 240, LT storage unit 245, content Information de- 
cryption unit 250, license Information processing unit 
260, content decryption unit 270 and external media ac- 
cess unit 280. 

[0063] The communication unit 210 communicates 
with the server 100. To be more specific, the communi- 
cation unit 210 is a communication Interface, which 
communicates with the server 100 via the communica- 
tion network 300 using the browser software, etc. It 
sends a message for the content purchase request and 
for the LT Issuance request according to the request 
from the operation unit 220, stores the content sent from 
the server 100 to the content storage unit 240, stores 
LT to the LT storage unit 245, and generates SAC with 
the communication unit 190 on the server 100. 
[0064] The operation unit 220 is a user interface, 
which accepts user's operations, and displays the web 
page provided by the server 100, and so on. 
[0065] The ID information storage unit 230 stores ID 
Information (client ID) of the terminal. To be more spe- 
cific, the ID information storage unit 230 stores and 
holds the unique client ID previously embedded for each 
terminal. Also, the ID information storage unit 230 may 
hold the public and private keys In the public key cryp- 
tography for encrypting LT, or the secret key In the 
shared key encryption method. 
[0066] The content storage unit 240 Is comprised of, 
for example, HDD, etc., and stores the encrypted con- 
tent. 

[0067] The LT storage unit 245 stores LT sent from 
the communication unit 21 0. 



[0068] The content information decryption unit 250 
decrypts the content key and license Information from 
the received content Information (LT). To be more spe- 
cific, the content Information decryption unit 250 de- 
5 crypts the content key, etc. Included In LT stored In the 
LT storage unit 245 by using the client ID, the private 
key in the public key cryptography, or the secret key in 
the shared key encryption method. 
[0069] The license Information processing unit 260 
Identifies whether the content key can be used based 
on the license Information or not. To be more specific, 
the license Information processing unit 260 decides if 
the reproduction is possible. If possible, it passes the 
content key to the content decryption unit 270 and mon- 
itors that the reproduction process for the content han- 
dled by the content decryption unit 270 follows the ex- 
tracted usage rules. 

[0070] The content decryption unit 270 decrypts the 
content encrypted by the content key acquired from the 
license information processing unit 260. Specifically, the 
content decryption unit 270 decrypts the encrypted con- 
tent with the content key provided from the license in- 
formation processing unit 260 and reproduces the con- 
tent under the management of the license information 
processing unit 260. 

[0071] The external media access unit 280 outputs ei- 
ther the content or LT or both to the external media 500b 
or the external media 500c. 

[0072] The abovementloned ID Information storage 
unit 230, LT storage unit 245, content Information de- 
cryption unit 250 and license information processing unit 
260 are located In a secure module of which hardware 
Is tamper-resistant, for Instance, an IC card having a 
built-in micro chip. In this case, the decryption of the en- 
crypted license Information and the process for the li- 
cense Information may take place In the security mod- 
ule. However, since the encryption of the license infor- 
mation Is optional If LT is acquired from the server In a 
situation where SAC has been established, the decryp- 
tion process Is executed only for the case the license 
Information has been encrypted. Therefore, It is a stout 
design against any fierce physical attacks to steal these 
confidential information, and makes it impossible for any 
external entity to illegally access the client ID, content 
key contained In LT, usage rules and any critical & con- 
fidential Information In the light of copyright protection. 
The security module herein may be the tamper-resistant 
software. Also, the license information processing unit 
260 may be located in a secure place of the user termi- 
nal. 

[0073] In the content usage management system 1 
structured In this way, the right Information of each user 
forthe content is all managed basically at the distribution 
side. The content purchased (or pre-contracted) by the 
user is encrypted and stored in the content storage unit 
240 of the user terminal 200a. If the content stored on 
the user terminal 200 Is reproduced, moved and copied, 
the request and LT Issuance request messages are out- 
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put on the server 100 from the user terminal 200. The 
server 1 00 confirms the usage rule (or contract) UR-Us 
for the content requested by the user, and if there are 
usage rights of the user, It distributes the content infor- 
mation and LT that Includes "license Information" and 
the content key to the user. The license Information Is 
comprised of enable/disable information for reproduc- 
tion, moving and copying of the content and the user 
terminal uses the content In the way permitted in the li- 
cense Information. 

[0074] If the user acquires an Individual content 
through the purchase, etc., the usage rule regarding the 
content acquired by the user is put under the manage- 
ment of the user right Information DB 120 on the server 
100. This type Is called as a pay per use model. This 
system is also applicable to other models such as a sub- 
scribed (pre-contracted) model. The subscribed model 
has the formation similar to a tier payment (billing) ap- 
plied in the broadcasting of which billing system allows 
all of the programs in the pertinent channel be seen once 
a channel contract Is signed. In this case, the user right 
Information DB 120 retains the contract Information as 
the user right Information. 

[0075] Fig. 6 Is a diagram to show a configuration 
sample of the user management table 1 1 1 described in 
Fig. 5. 

[0076] This user management table 1 1 1 Is comprised 
of the user ID assigned to the user who has become a 
member of this content usage management system 1 , 
the user information ("Name*, "Address", "Tel No. 1", 'Tel 

No.2" "E-mall 1", "E-mail 2"...), associated with this 

user ID, the client ID ("Client ID 1 ", "Client ID 2", 'Client 
ID 3"...) that Is pre-asslgned to the user terminal used 
by this user In the content usage management system 
1. By means of the user management table 111 struc- 
tured In this way, once the client ID Is Identified, the user 
ID of the user who owns the terminal device having of 
a particular client ID can be specified. 
[0077] Fig. 7 Is a diagram that shows a configuration 
sample of the user right Information management table 
121 described In Fig. 5. 

[0078] This user right Information management table 
1 21 is set by the client ID or user ID and the content ID 
of the content purchased by the user and the content 
ID, and comprised of the ID of the user's usage rights 
(UR-Us) managed by the server and the remaining In- 
formation set per each usage scheme of the usage 
rights (license) entitled to the user. The remaining infor- 
mation set per each usage scheme indicates respec- 
tively that; how many times each user can stili repro- 
duce, move, copy the content purchased, how long he 
can use It, how many printouts he can make, etc. Also, 
the maximum continuous usage duration set and at- 
tached to the remaining Information shows the maxi- 
mum length of times allowed to use the content consec- 
utively for the reproduction process, etc., a count deci- 
sion threshold value Indicates the tlmeduratlon counting 
the content usage as once, and an accumulated usage 



duration shows the accumulative time duration that the 
content can be used. 

[0079] In the details of usage rights, an initial value is 
pre-defined for each of the contents by the content pro- 
5 vlder and the server manager according to the content's 
attributes, and the Initial value Is assigned as the re- 
maining information of the license at the time of the con- 
tent purchase. Even for the same content, If the sales 
are In the style of having different prices depended on 
10 the usage rules acquired by the user, the Initial value 
may be different according to the purchase price. Then, 
the remaining Information of the license may be decre- 
mented accordingly from the initial value for each of the 
usage rules and license Information extracted based up- 
*5 on the user's LT Issuance request, or may be Increment- 
ed by a request of the content provider's service offer. 
[0080] Although this user right Information manage- 
ment table 121 manages the usage right by the user ID, 
it may also manage the right by the client ID. 
20 [0081] Fig. 8 Is a diagram to show a configuration 
sample of the license Information described In Fig. 5. 
[0062] This license information Is generated with the 
extracted usage right, for example, the Information of 
minimum usage rule elements In the usage rules, and 
25 is comprised of one or multiple enable/disable informa- 
tion regarding the use of the content Each of the enable/ 
disable Information Is structured only from a parameter 
that shows Yes/No. a In Fig. 8 Indicates enable/disable 
Information for an action of reproduction, p Indicates en- 
so able/disable Information for an action of moving, and y 
indicates enable/disable for an action of copying. The 
type and the number of the enable/disable Information 
depend on the attributes of the content's. 
[0083] Although the case of the minimum usage right 
35 has been explained here, If the user makes a request, 
It is allowed to generate as many extracted usage rights 
as requested, i.e. not only the enable/disable informa- 
tion, but also It Is allowed to generate the license infor- 
mation which Includes the usage rules for multiple num- 
40 bers of times. Fig. 6 also shows a sample that a piece 
of license Information is composed of a rule for multiple 
use of the content; however, It is also possible to struc- 
ture each component of the license inf ormation as inde- 
pendent information, and multiple components are 
45 bound and handled as license Information for one con- 
tent. 

[0084] Fig. 9 Is a diagram to show a data format struc- 
ture of the content Information and LT generated by the 
content information generation unit 170. 

so [0085] LT 600 generated by the content information 
generation unit 170 Is comprised of the LT header 610 
and license information, I.e. an action as the operating 
details of the content, one or more LT action tag block 
(s) 620#1 -620#n to show the rules, etc. for the action, 

55 LT content key tag block 630 and LT footer 640. 

[0086] The LT header 61 0 is comprised of a LT iden- 
tifier 611 that shows this data is the license ticket han- 
dled In the content usage management system 1 , ver- 
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slon number 612 that shows the version of specifica- 
tions defined In the content usage management system 
1 , LT size 61 3 that shows data size of the entire LT, con- 
tent ID 614 that shows a content ID of the content as- 
sociated with this LT, UR-Us ID 61 5 that shows an ID of 
UR-Us originated this LT issuance, starting time 616 for 
a LT effective period that shows the date and time when 
this LT becomes effective, ending time 617 for the LT 
effective period that shows the date and time when this 
LT becomes Ineffective, LT moving permission flag 618 
that shows If moving the content or LT is allowed from 
one userterminal to some external media or another us- 
er terminal, and LT encryption method 619 that shows 
an encryption method (DE5, AES, etc.) applied to the 
LT content key tag block 630 and LT footer 640. 
[0087] The LT action tag blocks 620#1~620#n are 
comprised of the action ID 621 that shows the ID to 
specify the action details for the content, the maximum 
continuous usage duration 622 that shows the maxi- 
mum length of time to ope rate the content consecutively, 
the count decision threshold value 623 that Indicates as 
the time duration counting the content operation as 
once, a number counter 624 that shows the maximum 
number of operations for the content with this LT, and 
the accumulated usage duration 625 that shows the ac- 
cumulative time duration that the content can be used. 
Regarding the maximum continuous usage duration, for 
example, even though the content Is a 2 hours-long 
movie and you have to suspend (pause) Its reproduction 
for some reason such as going to a bathroom, It Is usu- 
ally set longer than 2 hours (for instance, 4 hours). The 
accumulated usage duration is used to have more strict 
control over the usage than the maximum continuous 
usage duration, and usually set longer than 2 hours, but 
shorter than the maximum continuous usage duration 
(for Instance, 3 hours). 

[0088] If the count decision threshold value 623 is "0", 
It counts as once when the content operation (usage) is 
started on the user terminal 200a. And If certain time 
duration Is specified to the value, It counts as once when 
it reaches the duration. Also the value set in the number 
counter 624 is subtracted every time the operation of 
the content takes place. However, if the count decision 
threshold value is effective (if it is not "0"), it is only sub- 
tracted at the point when the consecutive operation time 
of the content reaches the value In the count decision 
threshold value. Also the subtraction of the number 
counter is done only during the consecutive operation. 
Additionally, the time durations set for the maximum 
continuous usage duration 622 and for the accumulated 
usage duration are subtracted in accordance with the 
operation time of the content. The time duration set for 
the maximum continuous usage duration 622 Is sub- 
tracted even during the pause, whereas the subtraction 
is stopped during the pause for the time duration set in 
the accumulated usage duration 625. It shows enable if 
the value in the number counter 624 is 1 or more, shows 
disable If 0, and shows the minimum usage rule If 1 . 



Therefore, the number counter 624 may also be used 
as the enable/disable Information. 
[0089] Inthe LT content key tag block 630, the content 
key and the decryption key that decrypts the encryption 

s of the content associated with this LT are stored. 

[0090] The LT footer 640 Is an optional block that may 
or may not be attached. If attached, a hash value by 
SHA-1 algorithm Is stored to avoid any alterations on 
the LT header 610 to the part Just before the LT footer 

10 640, which means the part up to the LT content key tag 
block 630. 

[0091] Although the content ID has been stored Into 
the LT header 610 on this LT 600, the content ID may 
be set as an Identifier to associate the content Informa- 

19 tion with the content, and thereby It may become Impor- 
tant for making the content Information specified by the 
content ID acquired at the time of the content usage. In 
such a case, It may be stored In the tag block. 
[0092] Regarding the content usage management 

20 system 1 In the embodiment of the present invention as 
structured above, the actions taken for the content pur- 
chase shall be explained below with references to the 
flow chart shown In Fig. 10. 

[0093] Fig. 1 0 Is a flow chart, which shows processes 
25 executed respectively at the user terminal 200a and on 
the server 100 when a user purchases the content In 
this system. 

[0094] When the content is purchased, the user at the 
userterminal 200a operates the operation unit 220, ac- 

30 cesses a web page on the server 1 00, and calls up the 
content purchase screen (1) indicated in Fig. 11. 
[0095] The content purchase screen (1) is made up 
of an indication of categories which are available for a 
network purchase In this system such as "music", 

& "games", "electronic books", "movies" "paid TV pro- 
grams", acheckbox to select these categories, a "Next" 
button, a "Back" button, and so on. 
[0096] If the category of the content to be purchased 
Is music, the user operates the operation unit 220, clicks 

40 on the check box corresponding to "music", and presses 
the "Next" button. This makes the content purchase 
screen (2) shown in Fig. 1 2 displayed. 
[0097] This content purchase screen (2) is comprised 
of the category, details of "content ID", "title", "right in- 

45 formation", "sales price" for the tracks belonging to mu- 
sic, a check box to select these tracks, a "Purchase" but- 
ton, a "Back" button, etc. The "right Information " shows 
the original usage rules set by the content provider such 
as the initial value, number of reproduction, number of 

so moving, number of copying, usage duration, etc. If the 
track to be purchased Is "Surf-riding George", the user 
operates the operation unit 220, clicks on the check box 
corresponding to "Surf-riding George", and presses the 
"Purchase" button to enter his content purchase re- 

55 quest. 

[0098] If there is a request made by the user to pur- 
chase the content, the communication unit 210 in the 
user terminal 200a generates SAC with the communl- 
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cation unit 1 90 on the server 100, then acquires the ID 
Information (client ID) of the user terminal 200 that Is 
stored In the ID Information storage unit 230, and sends 
the content purchase request message including this ID 
Information to the server 100 (S1). This content pur- 
chase request message Is comprised of, for example, a 
message ID that indicates the content purchase, the 
content ID of the content requested to be purchased, 
the client ID of the user terminal that requests the con- 
tent purchase. 

[0099] Once the user authentication unit 1 50 receives 
this Information through the communication unit 190 on 
the server 100, it collates the received ID information 
with the ID Information stored In the user management 
DB 110 for the user authentication, and passes the con- 
tent purchase request to the user right processing unit 
180 (S2). To put It concretely, the user authentication 
unit 1 50 refers to the user management table 111, spec- 
ifies the user ID from the client ID, and then passes the 
user ID, the content ID, etc. as the content purchase re- 
quest to the user right processing unit 160. 
[01 00] After executing a billing process for the content 
purchase, the user right processing unit 160 registers 
the user's right Information for the content purchase to 
the user right information DB 120(S3). Specifically, the 
user right processing unit 160 specifies the user right 
Information management table 121 (See Fig. 7) for the 
user (for example, East XX) who purchases the content 
from the user ID "pana 01" by access the user right In- 
formation DB 120. And then the user right processing 
unit 1 60 stores Track 1 respectively to a field of the con- 
tent ID on the user right Information management table 
121 and stores the ID, "right Information A" and Its de- 
tails of the right Information UR-Us for Track 1 respec- 
tively to fields of the license Information per each content 
ID. For the details of this right information A, the remain- 
ing information (Nos. of reproduction, moving and cop- 
ying, etc.) of the Initial values set by the content provider 
Is entered. Then, the user right processing unit 160 
passes the content ID to the content Information gener- 
ation unit 1 70. 

[0101] The content Information generation unit 170 
acquires the related information (such as the content 
key) of the concerned content from the content informa- 
tion DB 130 (S4). Specifically, the content Information 
generation unit 170 accesses the content Information 
DB 130, acquires the content key 131 corresponding to 
the content ID with reference to the content key table 
1 32, and passes the acquired content key and the con- 
tent ID to the content acquisition unit 180. 
[0102] The content acquisition unit 180 acquires the 
concerned content from the content DB 140, and the 
content encryption unit 185 encrypts this content with 
the content key. To be more specific, the content acqui- 
sition unit 180 accesses the content DB 140 and ac- 
quires the content corresponding to the content ID with 
references to the content table 142, and passes the ac- 
quired content, the client ID, and the content key re- 



ceived from the content Information generation unit 1 70 
to the content encryption unit 185. The content encryp- 
tion unit 185 encrypts the received content by the con- 
tent key and passes the encrypted content to the com- 
5 munlcatlon unit 1 90. The communication unit 1 90 on the 
server 1 00 sends the encrypted content to the user ter- 
minal 200 (S5). 

[0103] Once the encrypted content is received (S6), 
the communication unit 210 of the user terminal 200 
10 sends thecontentto the content storage unlt240 to have 
It stored (S7). 

[0104] Throughout these processes executed re- 
spectively in the user terminal 200a and on the server 
100, the session for the content purchase is completed. 

15 [01 05] Since SAC is generated between the user ter- 
minal 200a and the server 1 00 and the encrypted com- 
munication takes place with a shared session key within 
the session for the content purchase session, It Is pos- 
sible to prevent the content purchase request message 

20 from being exposed on the network. 

[0106] Fig. 1 3 is a flow chart to show the processes 
conducted respectively in the user terminal 200a and on 
the server 1 00 when the user uses the content In this 
system. 

25 [0107] If the content is used, the user at the user ter- 
minal 200a operates the operation unit 220 to display 
the using content selection screen shown In the Fig. 14. 
This using content selection screen is comprised of the 
title, content ID of the content purchased by the user at 

so the user terminal 200a, or a pre-applicatlon of the li- 
cense ticket for the content pre-contracted, etc. and 
check boxes for these contents, "Next" and "Back" but- 
tons, etc. 

[0108] If the content is used, the user operates the 
35 operation unit 220 and enters his usage Information of 
the content to be reproduced. To put It concretely, the 
user displays the using content selection screen as 
shown In Fig. 1 4, marks on the check boxforthe content 
he wants to reproduce (for example, Surf-riding George) 
40 and clicks on the "Next" button. And then, he displays 
the content usage request screen as shown in Fig. 15. 
The content usage request screen Is comprised of ac- 
tions available for this content, reproduction, moving 
and copying, check box to select the action, text box to 
45 enterthe number of actions, a "Decide" button, a "Back" 
button, etc. 

[0109] As a part of the entry forthe usage Information, 
the user operates the operation unit 220, marks on the 
check box required forthe requesting details (in this par- 
se ticular example, reproduction and moving) of the con- 
tent selected (Surf-riding George), enters the numbers 
of requests (In this particular example, "2 (twice)" for re- 
production and "1 (once)" for moving) In the text box for 
the requesting details being marked. 
55 [011 0] If the check box is marked , the text box is de- 
faulted to M 1 n as the minimum usage rule. Then If the 
user wants to use It "2 (twice)" or more, he can simply 
enter the number he wants In the text box. 
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[01 1 1 J If there is a content reproduction request from 
the user, the communication unit 21 0 In the usertermlnal 
200 generates SAC with the communication unit 1 90 on 
the server 100, acquires the ID information (client ID) 
on the user terminal 200 stored In the ID Information 
storage unit 230, and then sends the LT Issuance re- 
quest message Including this ID information to the serv- 
er 1 00 (S1 1 ) . This LT Issuance request message, for ex- 
ample, Is comprised or the message ID that Indicates 
the LT Issuance request, content ID (for example, Track 
1) of the content to be used, content reproduction re- 
quest, I.e. the requesting information (Twice for repro- 
duction, once for moving) that indicates the details of 
the content usage request and client ID (for example, 
nat01 ) of the user terminal that requests to Issue LT. 
[01 1 2J The user authentication unit 1 50 that receives 
this Information via the communication unit 190 on the 
server 1 00 collates the ID Information received with the 
ID information stored in the user management DB 110 
for user authentication and passes the user Information 
and the content reproduction request to the user right 
processing unit 160 (S12). To be more specifically, the 
user authentication unit 150 refers to the user manage- 
ment table 111, specifies the user ID from the client ID, 
and then passes the user ID, and the client ID, content 
ID, requesting Information, etc. as a request to repro- 
duce the content to the user right processing unit 1 60. 
[0113] The user right processing unit 1 60 confirms the 
user right Information for the content requested, which 
is registered to the user right Information DB 120 (S13). 
Specifically, the user right processing unit 160 accesses 
the user right Information DB 120 and specifies the user 
right Information management table 121 (See the Fig. 
7) for the user (for example, East XX) who uses the con- 
tent from the user ID "panaOl". Then, the user right 
processing unit 1 60 refers to Track 1 in the field of the 
content ID on the user right information management 
table 121 , and confirms if reproduction and moving are 
still Included In the remaining Information (UR-Us) of 
Track 1 , If numbers of reproduction and moving request- 
ed are still remaining In the Information, and so on. 
[0114] In the case of a subscribed model (pre-con- 
tracted model), confirmation to the user right information 
is conducted by the validation in which subscription 
(contract) the requested content Is Included, and wheth- 
er the user holds the concerned subscription or not. 
[011 5] When the right Information for reproducing the 
requested content is Included in the registered right In- 
formation (S14), the user right processing unit 160 re- 
ports the enable/disable information of reproduction 
based on the right information to the license Information 
generation unit 1 65, updates details of the right Informa- 
tion for reproduction (decrements the number available 
for reproduction) and stores It to the user right Informa- 
tion DB 120 (S15). The license information generation 
unit 1 65 generates the license information based on the 
information provided from the user right processing unit 
1 60 and passes It to the content Information generation 



unit 1 70 (S1 5). To be specific, the user right processing 
unit 160, as shown In Fig. 16, updates "10 times" for 
reproduction, 'Twice" for moving and "3 times" for cop- 
ying In the remaining information of the content ID for 

5 the user ID "panaOl" to "8 times" for reproduction, 
"Once" for moving and "3 times" for copying. In other 
words, the usage rules (UR-Us) for reproduction are 
decremented from 1 0 times to 8 times and tor moving 
from 3 times to Twice, and the license Information gen- 
ts eratlon unit 165 passes the license Information of 
"Twice" for reproduction and "Once" for moving to the 
content Information generation unit 170, and makes it 
send to the user terminal 200a as LT. 
[0116] At the discretion of the server side, it is also 

T£ possible to send the usage right as LT, which is not met 
with the usage right requested from the user terminal. 
For example, even if the usertermlnal requests the right 
to reproduce the content twice, sending the reproduc- 
tion right for once as LT makes it possible to reserve the 

20 policy for sending the minimum usage right every time 
according to the business decision, etc. 
[0117] The content Information generation unit 170 
reads the content key information for the relevant con- 
tent from the content information DB 130 and generates 

25 the content information (LT) that includes this content 
key and the license Information (S16). Specif ically v the 
content Information generation unit 170 generates LT 
600 which Is comprised of LT header 61 0, LT action tag 
block 620 #1 having "2" In the number counter value for 

so the action of reproduction, LT action tag block 620 #2 
having "1" for the number counter value for the action 
of moving, LT content key tag block 630 and LT footer 
640. The content Information encryption unit 175 en- 
crypts this content Information (S1 6). To be more spe- 

3s clflc, the content information encryption unit 175 en- 
crypts the LT content key tag block 630 and the LT footer 
640. 

[0118] The communication unit 1 90 on the server 1 00 
sends the encrypted content key and the license infor- 
40 matlon as LT to the user terminal 200. 

[0119] In the Step S14, If the user right Information 
does not contain the right Information of reproduction for 
the requested content, a reproduction disable response 
message is sent from the server 1 00 to the user terminal 
45 200. This reproduction disable response message Is 
comprised of, for example, the message ID indicating 
that It Is a response for the LT Issuance request mes- 
sage and the status ID indicating that the reproduction 
is disable since there is no UR-Us pertinent to the re- 
st? quest. 

[0120] On the other hand, In the user terminal 200, 
the communication unit 210 receiving the content Infor- 
mation sends LT and the client ID stored In the ID Infor- 
mation storage unit 230 to the content Information de- 
55 cryption unit 250 after the LT has been stored in the LT 
storage unit 245 (S1 B), The content information decryp- 
tion unit 250 decrypts the encrypted content Information 
(LT) by the client ID, and passes the license Information 
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and the content key to the license Information process- 
ing unit 260 (S1B). 

[0121] The license Information processing unit 260 
checks the reproduction enable/disable Information of 
the license Information (S19). If OKto reproduce (S20), 
It passes the content key to the content decryption unit 
270. To put it concretely, the license information 
processing unit 260 checks If the number counterforthe 
action of reproduction Is 1 or more. If It Is 1 or more, It 
passes the content key to the content decryption unit 
270. The content decryption unit 270 acquires the con- 
tent from the content storage unit 240 (S21), decrypts 
the content with the content key, and reproduces Track 
1, "Surf-riding George" under the management accord- 
ing to the extraction usage rules In the license Informa- 
tion processing unit 260 (S22). 
[0122] By the way, the LT action tag block 620#1 for 
the action of reproduction Includes the count decision 
threshold value, the maximum continuous usage dura- 
tion, and the accumulated usage duration besides the 
number counter value. 

[01 23] Therefore, for content reproduction at the user 
terminal, It applies a method to decide reproduction Is 
executed once If a certain period of time has passed 
since the start of reproduction. By distributing this infor- 
mation about the certain period of time from the distri- 
bution server, It can be variable. 
[0124] It Is also possible to apply the method as fol- 
lows. When content reproduction Is started, It Is counted 
as once. And If It is within a certain period of time from 
the start of the reproduction, any reproduction acts are 
regarded as the same reproduction and permitted. The 
Information Indicating Its scope can be distributed and 
treated as the time limit for counting the reproduction as 
once. 

[0125] in other words, as shown In Fig. 1 7, as long as 
a certain period of time is set as the count decision 
threshold value, the reproduction Is not counted as once 
If It is less than the time (for Instance, pre-reproductlon). 
And reproduction Is counted as once when It reaches 
the count decision threshold value. And If the time Is set 
in the maximum continuous usage duration, It can real- 
ize a flexible usage scheme, which makes It possible to 
make a suspension (a pause) during reproduction be- 
cause It Just exercises the right of reproduction for once 
and the content can be reproduced periodically until It 
reaches the maximum continuous usage duration. Also 
If a certain period of time Is set In the accumulated usage 
duration, the content can be accumulatively reproduced 
until it reaches the accumulative usage duration. There- 
fore, a wide variety of content usage can be provided to 
the user. 

[0126] Furthermore, the policy for making decisions 
on the period available for reproduction can be changed 
based on the content type (for example, movie and mu- 
sic). 

[0127] When a reproduction disable response mes- 
sage Is received from the server 100 (S17), and the li- 



cense information is unable to reproduce in Step 20, It 
terminates the process without reproducing the content. 
In this case reproduction disable Is notified, forexample, 
by a response message formed with the status code 
5 ERROR_URUS, which Indicates that there Is no usage 
right UR-Us relevant to the request. Also, reproduction 
disable may be notified with LT containing the LT action 
tag block 620 of which reproduction number counter val- 
ue Is set to "0". 
10 [0128] Also, when the license Information stipulates 
the content can be used Just once, the license Informa- 
tion processing unit 260 deletes this license Information 
after the content is used, or triggers the flag to show It 
is no longer effective, and executes a process to nullify 
t5 the license Information (LT). 

[0129] in case the license Information contains multi- 
pie action rules (for example, reproduction and moving) 
and a combination of those Is handled as the license 
information for one content, only the rule pertinent to this 
20 particular usage (for example, reproduction) Is nullified. 
[0130] Also, even If it is a subscribed model, on one 
hand, unlimited number of usage may be permitted to 
each of the content (for example, tier billing), but on the 
other hand, an upper limit is defined for the usage rule. 
25 (For example, the upper limit of a monthly charge is 
5000 yen for PPV (Pay Per View).) If there Is the upper 
limit for the usage rule, at the confirmation of the user 
right Information, It validates whether the user holds the 
usage rule of the concerned content (validation of the 
so pay per use model) after the aforementioned contract is 
validated. Additionally, the user right information DB 1 20 
may be spilt Into the databases for the contract Informa- 
tion and for the usage rules to be managed respectively. 
[0131] If the license Information allows to move or 
3s copy the content In this content usage management sys- 
tem 1 , It Is possible to move the right Information (usage 
rules) and the content key with the content to the exter- 
nal media 500b and 500c via the external media access 
unit 280. In such a case, the right Information Is moved 
40 and copied after It Is converted Into the data format sup- 
ported by the external media 500b and 500c. Moreover, 
encrypted conversion (re-encryptlon) Is conducted to 
the content in an encryption method supported by the 
external media 500b and 500c. Similarly, the content 
45 key is converted Into the encryption key corresponding 
to the encryption method supported by the external me- 
dia 500b and 500c. Using the external media In this way 
makes It possible to use the content, and at the same 
time, copyrights of the content are protected by a con- 
50 tent management method different from this content us- 
age management system 1 . However If the external me- 
dia Is capable of supporting the content usage manage- 
mentsystem 1 1n the present Invention, It is unnecessary 
to have the data conversion of the right Information and 
55 encrypted conversion of the content. 

[0132] Fig. 1 8 is a flow chart to show the process ex- 
ecuted atthe user terminal 200aforthe case the content 
or LT Is moved out to the external media. 
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[0133] if the content or LT Is moved, the user at the 
user terminal 200a operates the operation unit 220 to 
display the moving content selection screen shown In 
Rg. 19. This moving content selection screen Is com- 
prised of the title and content ID of the content pur- * 
chased by the user at the user terminal 200a, or the li- 
cense ticket, etc. received in advance, these contents, 
check boxes for LT, a "Decide" button, etc. The user dis- 
plays the usage content selection screen shown In Fig. 
1 9, marks on the check box for the content he wants to 10 
move (for example, Surf-riding George) and clicks on 
the "Decide" button. 

[0134] If there is a request for moving the content from 
the user, the license information processing unit 260 In 
the user terminal 200a passes the client ID stored in the 1* 
ID Information storage unit 230 and LT stored In the LT 
storage unit 245 to the content Information decryption 
unit 250. The content Information decryption unit 250 
decrypts the encrypted content information (LT) by the 
client ID and passes the license Information and the con- 20 
tent key to the license Information processing unit 260. 
[0135] The license Information processing unit 260 
checks the enable/disable Information for moving the li- 
cense Information, and decides whether It Is O.K. or not 
O.K. to use, In other words, decides whether the number 25 
counter value In the LT action tag block 620#2 for the 
action of moving Is 1 or more (In the case of "before use" 
or "after use and O.K. to use") (S31). If It Is available to 
use (Yes In S31 ), the external media 500b or the external 
media 500c validates through the content encryption 30 
unit 270 and the external media access unit 260 if the 
LT can be processed or not (S32). 
[0136] If It cannot be processed (No in S32), the li- 
cense Information processing unit 260 decides whether 
the usage rules are formatted to the Information convert- 3s 
ed Into the content control Information (S33). More spe- 
cifically, the license information processing unit 260 de- 
cides whether the external media 500b or the external 
media 500c can manage the content with the content 
control Information In a secure, tamper-resistant mod- 40 
ule. If It can manage, then the license information 
processing unit 260 converts the LT action tag block 620 
#2 for moving to the content control information (S34), 
and passes the converted content control information 
and the content key to the content decryption unit 270. 45 
The content decryption unit 270 acquires the content 
from the content storage unit 240, decrypts the content 
with the content key, and passes the decrypted content 
and the content control information provided from the 
license information processing unit 260 to the external so 
media access unit 260. The external media access unit 
260 moves the decrypted content and the content con- 
trol Information provided from the content decryption 
unit 270 to the external media 500b or the external me- 
dia 500c (S35). 55 
[0137] Also, if the process in Step S32 is possible, the 
license Information processing unit 260 passes LT to the 
content decryption unit 270. The content decryption unit 



270 acquires the content from the content storage unit 
240, decrypts the content bythecontent key and passes 
the decrypted content and LT provided from the license 
information processing unit 260 to the external media 
access unit 280. The external media access unit 280 
moves the decrypted content and LT provided from the 
content decryption unit 270 to the external media 500b 
or the external media 500c (S35). In this case, the con- 
tent decryption unit 270 passes the content without hav- 
ing It decrypted to the external media access unit 280, 
and the external media access unit 280 can move the 
content being encrypted to the external media 500b or 
the external media 500c (S35). 
[0138] Therefore, through the external media 500b or 
the external media 500c, the content is available for use 
In other terminals such as a mobile Information terminal 
and a digital television receiver. 
[0 1 39] If It Is not available for use In Step S3 1 , In other 
words, the number counter in the LT action tag block 
620 #2 for the action of moving Is "O", or the external 
media 500b or the external media 500c cannot manage 
the content with the content control Information In a se- 
cure, tamper-resistant module In Step S33, the license 
Information processing unit 260 terminates the moving 
process. Therefore, its copyright is never infringed. 
[0140] Although the moving process has been ex- 
plained in this flowchart, It can also be applied to a cop- 
ying process if Step S35 is changed to the process for 
copying. Also, only the LT acquired In advance can be 
moved or copied to the external media 500b or the ex- 
ternal media 500c. 

[0141] As mentioned above, It Is possible to make the 
content usage of each user be managed mainly at the 
server side In this system. Therefore, the server can 
grasp the usage status of the content at each terminal. 
Also, In case a certain service Is provided due to a spe- 
cial campaign, etc. to expand the right that has already 
been acquired by the user, It can simply be realized by 
upgrading the user right Information stored on the dis- 
tribution server. 

[0142] Meanwhile, the user terminal just needs to 
control reproduction, moving, copying, etc. based on the 
license information, so that it can get rid of having any 
extra loads of processes for managing complicated us- 
age rules. Also, the centralized usage rule management 
at the distribution server side can avoid any unauthor- 
ized use by the terminal such as alteration on the usage 
rules. 

[0143] As has been clarified from above explanation, 
by means of the content usage management system re- 
lated to the conformation of this embodiment, the server 
1 00 generates LT that Is the right Information to Indicate 
a part of the usage rule owned by the concerned user 
based on the user right information DB 120, which mem- 
orizes the right information related to the usage rule of 
the content owned by the user who uses the user termi- 
nal 200a, and the request from the aforementioned user, 
Is equipped with the content Information generation unit 
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1 70 that sends ft to the user terminal 200a, and the user 
terminal 200a Is equipped with the communication unit 
210, which receives LT sent from the server 100, and 
the license Information processing unit 260, which con- 
trols the use of the content according to the usage au- 
thorization Indicated on the received LT. 
[0144] Therefore, the terminal device doesnt need to 
manage all of the usage authorization owned by the us- 
er, Is able to control the content usage Just by managing 
a part of the user's usage authorization Indicated on the 
license ticket so that it extensively reduces the loads of 
process required for the management in the terminal de- 
vice. Also, the server device is able to grasp the status 
of the content usage at each terminal device In conjunc- 
tion with the license ticket Issuance. Even If a copy of 
the content is taken at the terminal , It can detect at what 
time the copy was taken on what media as a query Is 
made to the server device for copy permission, which 
makes it possible to keep track of the content. Moreover, 
because the server device holds the usage authoriza- 
tion owned by the user, the usage rules of the user, etc. 
can be restored easily even If the storage mechanism 
(HDD) In the terminal device Is crashed. Also, It can eas- 
ily conduct the processes to add some usage rules and 
to provide service to expand the usage rules such as to 
add "1" automatically for the number of reproduction In 
the usage rules for the content. Furthermore, It ensures 
to prevent the content from being used unlimltedly by 
the terminal device, for the content usage control mech- 
anism in the terminal device controls the use of the 
abovementioned content according to the usage author- 
ization Indicated on the received license ticket. 
[0145J In the embodiment above, the content, which 
is not encrypted, Is stored In the content DB 140, and 
then it Is encrypted and distributed at the time of content 
purchase (Fig. 1 0, S5). However, the content key on the 
server 1 00 can encrypts the content in advance and it 
Is stored In the content DB 140. In this case, when there 
Is a purchase request from the user, the encrypted con- 
tent can be sent as Is, which makes It possible to reduce 
the load of process on the server and the latency time 
of the user. 

[0146] Also, in the embodiment above, the explana- 
tion has been given for the case to send the content and 
LT via communication, but It is also possible to send the 
content and LT through broadcasting. In this case, If the 
license Information of the user Is distributed to the user 
terminal prior to the actual use of the content or the con- 
tent and LT are p re-distributed at the same time via 
broadcasting, it becomes possible to use the received 
content Immediately, and consequently It Improves the 
response when the content is used. Also, since It can 
eliminate the communication process at the time of con- 
tent usage, the load of process on the distribution server 
can be reduced. 

[01 47] Additionally, in the embodiment above, though 
the content Information encryption unit 1 75 executes the 
encryption process for LT at the same time SAC is gen- 



erated with the server terminals, the encryption process 
for LT handled by the content Information encryption unit 
175 may be omitted. 

[01 48] Also, In case the license Information is not yet 
5 encrypted when the license Information Is acquired from 
the server, It may be encrypted by user-unique informa- 
tion such as a terminal ID (client ID) and stored when 
LT is stored in the LT storage unit 245 so that disclosure 
of the content key, any unauthorized alteration and any 
10 unauthorized usage by other user can be avoided. How- 
ever, encryption Is not required If the LT storage unit 245 
is realized in a tamper-resistant hardware. 
[0149] Also, it may apply to the formation that some 
recorded media such as CD-ROM, DVD-ROM to which 
f* various types of encrypted contents are recorded is dis- 
tributed as a supplement of magazines, and the user 
purchases only those he likes. Or it may also apply to 
the formation that a distributor side distributes various 
types of contents in advance by using the distribution 
20 channel In broadcasting, makes them stored In the con- 
tent storage unit 240 within the user terminal 220a, and 
the user purchases only those he likes. In these cases, 
If the usertakes an appropriate purchase procedure, the 
right of the content the user likes Is generated In the user 
25 right information DB 1 20 on the server 1 00. By doing so , 
it becomes possible for the user to make a request to 
Issue LT when he uses the content. In this formation, 
since the cost spent for the content distribution can be 
restrained as much as possible, the effect to restrain the 
so price of the content Itself can also be expected. 

[0150] It may also apply to the formation that the re- 
cordable media such as CD-ROM, DVD-ROM where the 
encrypted content Is recorded to Is sold in the same way 
as the regular package. According to a registration pro- 
as cedure taken by user who purchases such a recorded 
media, the right of the purchased content is generated 
in the user right information DB 120 on the server 100. 
Then, hereafter It becomes possible to request the LT 
Issuance every time the content is used. 
40 [0151] Additionally, In the embodiment above, though 
the LT Issuance request is made as soon as the user 
requests reproduction, It may apply the method to con- 
firm any LT existence at first in the LT storage unit 245. 
If there is LT, it validates whether reproduction can be 
45 executed with the LT or not. Then, If the reproduction is 
possible, It reproduces the content. Only if there Is no 
LT, LT Issuance can be requested. 
[0152] Also, In the formation of the abovementioned 
embodiment, if the user who requests to reproduce the 
so content does not hold the right to reproduce it (No to 
StepS14ln Fig. 13), the reproduction disable Is notified. 
However, It is also possible for the distribution server to 
conduct the process as an additional purchase for its 
reproduction right based on the consensus with the user 
55 or by a tacit agreement instead of giving a notice of re- 
production disable, in this case, the automatic purchase 
can simplify the purchase procedure since It only bills 
those that are used. 
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[0153] Although the explanation was given for the 
case that the license Information contains the enable/ 
disable parameter allowing to do reproduction, moving 
or copying once, it Is also possible for the license Infor- 
mation to Include the parameter either to show the per- & 
mission only for once or for an unlimited number of con- 
tent reproduction, and the parameter either to show no 
permission or unlimited permission of content moving. 
In this case, when the license Information shows unlim- 
ited permission, the license Information processing unit 
260 In the user terminal 200a holds the content key and 
always provides the content key to the content decryp- 
tion unit 270. 

[0154] Furthermore, in the license information, vari- 
ous types of the ruleforthecontentcan be set by a com- 
bination of multiple enable/disable Information. For ex- 
ample, only the reproduction enable/disable Informa- 
tion, and the moving enable/disable Information are dis- 
tributed, and a combination of these can realize the 
process called "Check-ln/Check-out." When the content 
is duplicated, "Check-ln/Check-out" doesn't simply du- 
plicate It, It enables reproduction, disables moving (nat- 
urally, copying is disabled), and establishes a relation- 
ship between the parent content and the child content 
to prevent the child content from being moved freely. In 
the case of this license Information, the "Check-In/ 
Check-out" Information Is held on the distribution server; 
however, the enable/disable Information of "Check-In/ 
Check-out" Is not especially required as the license In- 
formation. The relationship between the parent (server) 
and the child (storage media) when it is "Checked-in/ 
Checked-out" Is managed at the server side or the re- 
cipient side, and it can be expressed as the distributing 
Information only by the combination of reproduction and 
moving. Therefore, it makes It possible to reduce a 
number of parameters distributed to the user terminal 
and a load of process on the user terminal, and simply 
to control over the generation copies, such as to prohibit 
copies from the child to the grandchild. 
[0155] Also, In the configuration of above embodi- 
ment, though the propriety was checked In the LT footer 
640, It may Include the Information for detecting any al- 
teration to check the propriety by each LT action tag 
block 620#1 to 620#n. 

[0156] Also, In structure of above embodiment, the 
distributed license Information (LT) before use was 
stored In the LT storage unit 245 In the user terminal 
200a, LT may be stored temporarily In the external me- 
dia 500b or the external media 500c. 
[0157] Additionally, In case the user terminal 200 
moves the content to the external media 500b and 500c, 
the user terminal 200a validates whether the moving 
was allowed. However, the server 100 may pre-deter- 
mlne whether the destination of the external media 500 
is cap able of processing the license information, and on- 
ly If it is capable, the server 1 00 may send the license 
information that permits to move the content to the user 
terminal. At this time, the distribution server communi- 



cates with the user terminal, acquires the information of 
the external media as its destination, and decides 
whether it's OK to move the content or not. 
[0158] Also, It Is possible to make the external media 
access unit 280 in the user terminal 200a authenticate 
the external media 500a and 500c and the user terminal 
200a decide whether the external media 500a, 500c are 
capable of processing the license Information, or what 
content control Information Is possible to be processed. 
[01 59] Furthermore, In the configuration of above em- 
bodiment, the server 1 00 manages content distribution, 
billing, etc. In bulk together with the right management; 
however, it may be configured to form each of the func- 
tion separately for content distribution, billing, etc. 



Claims 

1 . A content usage management system that compris- 
es a terminal device that uses a content as a digital 
production, and a server device that manages us- 
age of the content on thetermlnal device via a trans- 
mission line, 

wherein the server device includes: 

a right Information memory unit operable to 
memorize right Information related to a usage 
right of the content entitled to a user who uses 
the terminal device; and 
a license ticket issuance unit operable to gen- 
erate a license ticket based on a request from 
a user as right Information that Indicates a part 
of the usage right entitled to the user and to 
send the license ticket to the terminal device, 
and 

the terminal device Includes: 

a receiving unit operable to receive the li- 
cense ticket from the server device; and 
a content usage control unit operable to 
control usage of the content according to 
the usage right Indicated on the received 
license ticket. 

The content usage management system according 
to Claim 1 , 

wherein the license ticket Issuance unit ac- 
quires a request from the user that specifies a part 
of the usage right entitled to the user, generates a 
license ticket corresponding to the request, and 
sends the license ticket to the terminal device. 

3. The content usage management system according 
to Claim 1 , 

wherein the license ticket issuance unit gen- 
erates a license ticket that indicates a minimum unit 
of a usage right Included In the usage right entitled 
to the user and sends the license ticket to the ter- 
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minal device. 

4. The content usage management system according 
to Claim 1, 

wherein a license ticket Includes one or mul- 
tiple numbers of enable/disable Information regard- 
ing content usage. 

5. The content usage management system according 
to Claim 4, 

wherein the enable/disable Information Indi- 
cates whether one of reproduction, moving and 
copying actions for the content is enabled or disa- 
bled. 

6. The content usage management system according 
to Claim 4, 

wherein the enable/disable information indi- 
cates that usage of the content is allowed or not al- 
lowed once or more than once including unlimited 
numbers of times. 

7. The content usage management system according 
to Claim 1 , 

wherein the license ticket issuance unit sends 
a license ticket to the terminal device after the li- 
cense ticket Is encrypted, 

the terminal device further Includes a decryp- 
tion unit that decrypts the license ticket received by 
the receiving unit, and 

the content usage control unit controls usage 
of the content according to a usage right Indicated 
on the decrypted license ticket. 

8. The content usage management system according 
to Claim 7, 

wherein the decryption unit and the content 
usage control unit are a tamper-resistant security 
module. 

9. The content usage management system according 
to Claim 1, 

wherein the license ticket includes detective 
information to detect whether any details of the li- 
cense ticket have been altered. 

10. The content usage management system according 
to Claim 1 , 

wherein the content usage control unit verifies 
whether a license ticket allows any further usage of 
the content after the content has been used, and 
deletes or invalidates the license ticket If It does not 
allow. 

11 . The content usage management system according 
to Claim 1 0, 

wherein the terminal device further Includes 
an external recordable media that Is detachable, 



and 

the content usage control u nit stores a license 
ticket in the external recordable media If the license 
ticket before using the content and the license ticket 
5 after using the content that permits further usage of 
the content, allow to move the content. 

12. The content usage management system according 
to Claim 11, 

io wherein the terminal device further Includes a 

decision unit that decides whether the external re- 
cordable media connected to the terminal device Is 
equipped with a control unit that controls usage of 
the content according to the usage right Indicated 

is on the license ticket, and 

the content usage control unit stores the li- 
cense ticket to the external recordable media If the 
external recordable media Is verified to include the 
unit to control usages. 

20 

13. The content usage management system according 
to Claim 12, 

wherein the content usage control unit con- 
verts the license ticket Into content control informe- 
rs tion in a different format if the external recordable 
media Is verified not to Include the control unit for 
said content usage management system. 

14. The content usage management system according 
so to Claim 6, 

wherein, the enable/disable information in- 
cludes a condition being as a basis for deciding the 
content is used once, and 

the content usage control unit decides thatthe 
3s content Is used once based on the condition. 
( 

1 5. The content usage management system according 
to Claim 14, 

wherein the condition is set according to a us- 
40 age style of the content. 

16. The content usage management system according 
to Claim 15, 

wherein the condition is time duration spent 
45 to reproduce the content, and 

the content usage control unit decides the 
content Is used once based on duration spent to re- 
produce the content. 

so 17. The content usage management system according 
to Claim 16, 

wherein the content usage control unit re- 
gards the usage as being taken place once If dura- 
tion from a start of the reproduction Is within time 

55 indicated in the condition. 

18. A server device that manages usage of a content In 
a terminal device using the content as a digital pro- 
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duction via a transmission line Including: 

a right Information memory unit that memorizes 
right Information related to a usage right of the 
content entitled to a user using the terminal de- 5 
vice; and 

a license ticket issuance unit that generates a 
license ticket based on a request from the user, 
which Is right Information Indicating a part of the 
usage right entitled to the user, and send the 10 
license ticket to the terminal device. 

19. The server device according to Claim 18, 

wherein the license ticket Issuance unit ac- 
quires a request from the user to specify a part of 
the usage right entitled to the user, generates a li- 
cense ticket corresponding to the request, and 
sends the license ticket to the terminal device. 

20. The server device according to Claim 1 8, 20 

wherein the license ticket Issuance unit gen- 
erates a license ticket that Indicates a minimum unit 
of a usage right Included in the usage right entitled 
to the user. 

25 

21. The server device according to Claim 18 that further 
acquires Information related to external recordable 
media connected to the terminal device from the ter- 
minal device based on a request from the user In- 
cluding: so 

a decision unit that decides If the external re- 
cordable media contains a unit that controls us- 
age of the content according to the usage right 
indicated on the license ticket. ss 

22. A terminal device that receives permission of a 
server device via a transmission line and uses a 
content as a digital production Including: 

40 

a receiving unit that receives a license ticket as 
right Information Indicating a part of the usage 
right entitled to a user; and 
a content usage control unit that controls usage 
of the content according to the usage right In- 
dlcated on the received license ticket. 

23. The terminal device according to Claim 22 that fur- 
ther includes a decryption unit that decrypts a li- 
cense ticket received from the receiving unit, so 

wherein the content usage control unit con- 
trols usage of the content according to the usage 
right Indicated on the license ticket decrypted. 

24. The terminal device according to Claim 22, 55 

wherein the content usage control unit de- 
cides whether the license ticket allows further us- 
age of the content after the content has been used, 



32 

and deletes the license ticket If it does not allow. 

25. The terminal device according to Claim 24 further 
Including a detachable external recordable media, 

wherein the content usage control unit stores 
a license ticket to the external recordable media If 
the license ticket before using the content and the 
license ticket after using the content that permits 
further usage of the content allow to move the con- 
tent. 

26. The terminal device according to Claim 25 further 
Including a decision unit that decides whether the 
external recordable media connected to the termi- 
nal device is equipped with a control unit that con- 
trols usage of the content according to usage right 
Indicated on the license ticket, 

wherein the content usage control unit stores 
a license ticket to the external recordable media if 
the external recordable media is verified to include 
the control unit. 

27. The terminal device according to Claim 26, 

wherein the content usage control unit con- 
verts the license ticket into content control informa- 
tion In a different format If the external recordable 
media Is verified not to Include the control unit. 

28. A content usage management method for a system 
including a terminal device that uses a content as a 
digital production and a server device that manages 
usage of the content In the terminal device via a 
transmission line, 

wherein the server device Includes: 

a right Information memory step to memorize 
right information related to a usage right of the 
content entitled to a user who uses the terminal 
device; and 

a license ticket Issuance step to generate a li- 
cense ticket as right Information indicating a 
part of the usage right entitled to the user based 
on a request from the user, and 
the terminal device includes: 

a receiving step to receive a license ticket 
sent from the server device; and 
a content usage control step to control us- 
age of the content according to the usage 
right indicated on the license ticket re- 
ceived. 

29. The content usage management method according 
to Claim 28, 

Wherein, in the license ticket issuance step, 
the server device acquires a request from the user 
that specifies a part of the usage right entitled to the 
user, and generates a license ticket corresponding 
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to the request, and sends the license ticket to the 
terminal device. 

30. A program used for a server device in a content us- 
age management system including a terminal de- 5 
vice that uses a content as a digital production, and 

a server device that controls usage of the content 
In the terminal device via a transmission line, the 
program having a computer function as the server, 
the server device Including: ™ 

a right Information memory unit that memorizes 
right information related to a usage right of the 
content entitled to a user using the terminal de- 
vice; and 15 
a license ticket Issuance unit that generates a 
license ticket based on a request from the user, 
which Is right Information Indicating a part of the 
usage right entitled to the user, and send the 
license ticket to the terminal device. 20 

31 . A program used for a terminal device in a content 
usage management system Including atermlnai de- 
vice that uses a content as a digital production, and 

a server device that controls usage of the content *s 
in the terminal device via a transmission line, the 
program having a computer function as the terminal 
device, the terminal device including: 

a receiving unit that receives a license ticket as so 
right information indicating a part of the usage 
right entitled to a user; and 
acontent usage control unit that controls usage 
of the content according to the usage right In- 
dicated on the received license ticket. 
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Fig. 7 



User Right Info. Mgmt Table 121 



UserlD:pana03 



User ID:pana02 j 
User ID:pana01 

(Client ID:nat01 > 

■Content ID1 Track 1 
UR-Us ID1: Right Info, (License)A 
Remaining info 

• No. of reproduction: 10 times 

Max. continuous usaae duration: AO 
Count decision threshold value: DA 
Accumulated usage duration: O* 
■ No. of moving: 2 times 

• No, of copying: 3 times 

■ 

-Content ID2:Game 4 
UR-Us ID2: Right info. (License)B 
Remaining Info 

• Usage duration: 2001/12/1-2002/1/31 

• No. of moving: 0 times 

• No. of copying: 0 times 



'Content ID3:Book 3 
UR-Us ID3: Right lnfo.(License)C 
Remaining info 
• Printing: 3 copies 



•Content ID4:MOMOM-DTV 
UR-Us ID4: Right lnfo.(License)D 
Remaining info 
• Usage duration: 2001/1/1- 
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